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IN THE CLAIMS 

For the convenience of the Examiner, all pending claims of the present 
Application are shown below in numerical order whether or not an amendment has been 
made and applying the revised amendment practice of 37 CFR 1.121 - IFW Final Rule. 

1 . (Currently Amended) A server comprising: 

a communications module operable to receive a dual communication packet from 
[[the]] a client over a first charmel, the dual communication packet including a header having 
a client external IP address and a data payload having an encoded port command having a 
client intemal IP address and a client data port number; 

a codec operable to decode the port command; 

a translation module operable to retrieve the client external IP address from the header 
and to generate a modified port command including the external IP address; and 

the server operable to establish a second channel based on the modified port 
command. 

2. (Original) The server of Claim 1, further comprising a packet filtering server 
firewall. 

3. (Currently Amended) The server of Claim 2, further comprising a network 
address translator associated with the server firewall, the network address translator 
operable to include a static network address translation entry for each of the client and the 
server. 

4. (Original) The server of Claim 1, further comprising a file transfer protocol 
(FTP) communication module wherein the communication session between the server and the 
client over the second channel is conducted in secure FTP. 

5. (Original) The server of Claim 1, wherein the codec is operable to decode 
based on secure socket layer (SSL) encryption technology. 
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6. (Currently Amended) A client, comprising: 

a communications module operable to receive a communication packet from [[the]] a 
server over a first channel, the [[dual]] communication packet including a header having a 
server external IP address and a data payload having an encoded port command having a 
server internal IP address and a server data port number; 

a codec operable to decode the port command; 

a translation module operable to retrieve the server extemal IP address from the 
header and to generate a modified port command including the extemal IP [[addresses]] 
address ; and 

the server operable to establish a second channel based on the modified port 
command. 

7. (Original) The client of Claim 6, fiirther comprising a packet filtering client 
firewall. 

8. (Currently Amended) The chent of Claim [[2]] 7, fiirther comprising a 
network address translator associated with the client firewall, the network address translator 
operable to include a static network address translation entry for each of the client and the 
server. 

9. (Currently Amended) The client of Claim 6, further comprising a file 
transfer protocol (FTP) communication module wherein [[the]] a communication session 
between the server and the client over the second channel is conducted in secure FTP. 

10. (Original) The client of Claim 6, wherein the codec is operable to decode 
based on secure socket layer (SSL) encryption technology. 
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11. (Original) A method for establishing a data socket between first and second 
peers, comprising: 

receiving an LP Packet from the first peer, the IP packet including a header and a port 
command; 

the header including a first peer IP address and the port command including an 
encoded second peer IP address; 

decoding the encoded second peer IP address; 
retrieving the first peer IP address fi'om the header; 

generating a modified port command including the first peer address in place of the 
second peer EP address; and 

using the modified port command to establish a data socket between the first and 
second peers. 

12. (Currently Amended) A method for establishing a transient channel over a 
non-transient channel, comprising: 

receiving an IP packet over the non-transient channel^ the IP packet including a 
header and a port command; 

the header including a first peer IP address and the port command including an 
encoded second peer EP address; 

decoding the encoded second peer IP address; 

retrieving the first peer IP address fi-om the header; 

generating a modified port command including the first peer IP address in place of the 
second peer IP address; and 

using the modified port command to establish the transient channel between [[the]] a 
server and [[the]] a client. 
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13. (Currently Amended) A computer readable medium encoded with a 
computer program operable to: 

receive an IP packet from a first peer, the IP packet including a header and a port 
command; 

the header including a first peer IP address and the port command including an 
encoded second peer IP address; 

decode the encoded second peer IP address; 

retrieve the first peer IP address from the [[heading]] header ; 

generate a modified port command including the first peer IP address in place of the 
second peer IP address; 

establish a data socket between the first peer and a second peer using the modified 
port command. 

14. (Currently Amended) A method for establishing a data socket between a 
server and a client, comprising: 

encoding a port command including a client internal IP address and a client port 
number; 

generating a dual channel communication packet having a header and a data payload, 
the header including a server external EP address, server port number, the client internal EP 
address and the client port number; 

the data payload including the encoded port command; 

transmitting the communication packet between the server and the client; 

decoding the port command; 

retrieving [[the]] a client extemal IP address from the header; 

modifying the decoded port command by overriding the client intemal IP address 
within the decoded port command with the client extemal IP address retrieved from the 
header; and 

establishing a data socket between the server and the client using the modified 
decoded port command. 
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15. (Original) The method of Claim 14, further comprising readdressing the 
client intemal IP address within the header with the client external IP address, at a client 
firewall. 

16. (Currently Amended) The method of Claim 14, further comprising 
readdressing the server external IP address within the header with [[the]] a server intemal IP 
address at a server firewall. 

17. (Currently Amended) A method for establishing a data socket between a 
server and a client, comprising: 

transmitting a passive command to the server; 

encoding a port command including a server private IP address and a server port 
number; 

creating a dual channel communication packet having a header and a data payload, the 
header including a client extemal EP address, client port number, [[the]] a server intemal IP 
address and the server port number; 

the data payload including the encoded port command; 

transmitting the communication packet to the client; 

decoding the port command; 

retrieving [[the]] a server extemal IP address from the header; 

modifying the decoded port command by overriding the server intemal IP address 
within the decoded port command with the server extemal IP address retrieved firom the 
header; and 

establishing a data socket between the server and the client using the modified 
decoded port command. 

18. (Currently Amended) The method of Claim [[16]] 17, further comprising 
readdressing the server intemal IP address within the header with the server extemal LP 
address at a server firewall. 
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19. (Currently Amended) The method of Claim [[16]] 17, further comprising 
readdressing the client external IP address in the header with [[the]] a client internal IP 
address, at a client firewall. 
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20. (Currently Amended) A method for transferring information over an external 
network, comprising: 

establishing a control channel between a server and a client; 

identifying a first end point at a first one of the server and the client, the first end 
point including a first portion and a second portion; 

encoding the first end point in a secure format; 

encapsulating the encoded first end point in a transmission packet including an 
address header having the private address of the first end point; 

translating the private address in the address header into a public address for 
transmitting over the external network; 

transmitting the transmission packet over the external network in [[a]] the control 
channel; 

receiving the transmission packet at the other one of the client and the server; 
decoding the first end [[port]] point ; and 

modifying the end point by replacing the first portion in the decoded end point with 
the public address in the address header, and establishing a data channel between the client 
and the server using the modified end point. 

21. (Currently Amended) A signal for establishing a dual channel 
communication between remote nodes, comprising: 

a computer s torage medium; 

a modified dual channel command for establishing a transient data channel between 
remote nodes; and 

the modified dual channel command including a public IP address of a peer node 
copied firom an IP header of a packet transmitting [[a]] the dual charmel command. 
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